I am running my backend API's in azure app service. Trying to secure my API's that can only be access from certain resources. When Access the API it gives Error 403 - Forbidden
I have done:
.Created a VNET and attach Nsg with it
.Add all IP's in a rule of NSG (all app service outbound ip's and system local/public ip's)
.Attach VNET with app service
.App service Access restriction is off
1)When I remove Nsg from VNET app service is browse successfully
2)When I app all outbound ip's and system local/public ip it also browse successfully
How app service can be accessed from specified ip's using VNET and Nsg while app service Access restriction is set to be off?